[Secure-testing-commits] r49951 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-23 05:40:18 +0000 (Thu, 23 Mar 2017)
New Revision: 49951

Modified:
   data/CVE/list
Log:
Add upstream bug references for binutils

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-22 23:05:03 UTC (rev 49950)
+++ data/CVE/list	2017-03-23 05:40:18 UTC (rev 49951)
@@ -8,14 +8,19 @@
 	RESERVED
 CVE-2017-7227 (GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based ...)
 	- binutils <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=20906
 CVE-2017-7226 (The pe_ILF_object_p function in the Binary File Descriptor (BFD) ...)
 	- binutils <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=20905
 CVE-2017-7225 (The find_nearest_line function in addr2line in GNU Binutils 2.28 does ...)
 	- binutils <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=20891
 CVE-2017-7224 (The find_nearest_line function in objdump in GNU Binutils 2.28 is ...)
 	- binutils <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=20892
 CVE-2017-7223 (GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer ...)
 	- binutils <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=20898
 CVE-2017-7222 (A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 ...)
 	- mantis <removed>
 CVE-2017-7221